Overview

overview

10

Static

static

10

shell3.exe

windows7-x64

10

shell3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    shell3.exe

  • Size

    72KB

  • MD5

    1df4489ae4f3085d607481001c3b5edd

  • SHA1

    3e7e1dd682f4afd7a955f0fdbbe57ed3c28fc9b7

  • SHA256

    45cb9cc6168ab90bd8eef4d98181dba1b6e8f395004cbd0dc930e9e4c388ebe0

  • SHA512

    1455ae03e93534693d82efad466f936f79e4497722c9eb44889bdebdab407218a18ca58200c46e4f4b731537955ba4713088933ca3c02bc3d7d075a1daf82978

  • SSDEEP

    1536:IwG3aBwz5WnuHJnhbS3g5y4xnMb+KR0Nc8QsJq39:7GtWnyJnhWeyEne0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_http

C2

http://118.25.85.104:9443/6Oqh-tBYc5a9Grwb2OZSEgGYl1sHNWQGwzFrp2NwXQSl6kvaLGNWGt4NOH1WV6SZU-UdfCyLrdCWs4YVlv0cwp_n9sSTWiF-NGAG-WM2esr7RNrHgdJsWy4vbSJA4ryfVVpBp5KPtIHKNJUnLHq8oXgEY

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • shell3.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections